Lucene search

K
cve[email protected]CVE-2009-4692
HistoryMar 10, 2010 - 10:30 p.m.

CVE-2009-4692

2010-03-1022:30:00
CWE-79
web.nvd.nist.gov
30
cve-2009-4692
cross-site scripting
xss
radscripts
radlance gold 7.5
remote code injection

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.6%

Cross-site scripting (XSS) vulnerability in index.php in RadScripts RadLance Gold 7.5 allows remote attackers to inject arbitrary web script or HTML via the pr parameter in a ulist action.

Affected configurations

NVD
Node
radscriptsradlanceMatch7.5gold

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.6%

Related for CVE-2009-4692